← Home

@blockly/field-grid-dropdown

npm Repository Homepage

A Blockly dropdown field with grid layout.

3
Versions
Apache 2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

google-wombotmaribethb

Keywords

blocklyblockly-pluginblockly-fieldgrid-dropdown

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:./dist/index.js AI (source-diff): dist/index.js is a standard webpack UMD bundle for this Blockly plugin; minified output is expected and consistent across all versions of this package. ai
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions with SLSA provenance attestation is a legitimate and encouraged CI/CD security improvement for this Blockly ecosystem package. ai
license uncommon-license:Apache 2.0 AI (license): Apache 2.0 is a well-known permissive license; the non-canonical string format triggers the rule but poses no real risk. ai

Versions (showing 3 of 103)

Version Deps Published
1.0.7 0 / 3
1.0.6 0 / 3
1.0.5 0 / 3

v1.0.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.0.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.